cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1305
Views
0
Helpful
5
Replies

PIX Active/Standby Cable Failover with zero downtime?

j.jeater
Level 1
Level 1

Chaps,

We have a pair of 515e's with cable based failover running 8.0(2).

Apparently in the past when one of the PIX's was turned off the failover was almost instant, recently it's taken about 30 secs.  Any idea what could be wrong.

'show xlate' on the stanbdby shows that it's getting stateful connections.

There have been no significant changes to the or upgrades, just new a few new servers/services added.

Any help appreciated,

Jim

5 Replies 5

Jennifer Halim
Cisco Employee
Cisco Employee

Here is the default failover timeout on PIX:

- unit failover: poll time: 15 seconds with hold time of 45 seconds:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/ef.html#wp1928426

- interface failover: poll time: 5 seconds with hold time 5 times the poll time: 25 seconds --> which is approximately 30 seconds:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/ef.html#wp1928586

Hi,

Does it still need to poll when the serial cable detects the other unit is powered off?

Jim

You are right. No, if it detects that the other unit is powered off, it should automatically fail over. Maybe the serial cable is faulty.

I had a debug running on the secondary and I saw a lot of activty when the active was switched off so I think the cable is fine.

Any other ideas?

Can you share the debug output on secondary?

Review Cisco Networking for a $25 gift card